syzbot

 sign-in | mailing list | source | docs
🐞 Open [98]
🐞 Fixed [351]
🐞 Invalid [381]
≡ Crashes
Kernel Health Bugs/Month Bug Lifetimes Fuzzing
💬 Send us feedback

Instances [tested repos]:
Name Last active Uptime Corpus Coverage 🛈 Crashes Execs Kernel build syzkaller build Bugs
Commit Config Freshness Status Commit Freshness Status All Only
ci-freebsd-i386 now 2h47m 9006 186799 666 500000 b87aa791533f .config 12h03m d8fc7335 3h13m all only
ci-freebsd-main now 2h48m 9116 108969 1758 475706 b87aa791533f .config 12h03m d8fc7335 3h13m all only
upstream (98):
Title Repro Cause bisect Fix bisect Count Last Reported Last activity
panic: deadlres_td_sleep_q: possible deadlock detected for ADDR (syz-executor), blocked for ADDR ticks 1 2h55m 2h55m 2h55m
panic: starting DAD on non-tentative address ADDR 1 3d12h 3d12h 3d12h
panic: ASan: Invalid access, NUM-byte read at ADDR, MallocRedZone(fb) (4) 1 3d14h 3d14h 3d14h
panic: witness_warn (3) 1 6d22h 6d22h 6d22h
Fatal trap NUM: page fault in in_pcbremhash_locked (2) 6 1d01h 10d 10d
Fatal trap NUM: page fault in in_joingroup_locked 1 12d 12d 12d
panic: proc_dtor: non-empty p_ktr 1 17d 17d 17d
SYZFAIL: repeatedly failed to execute the program 5 1d23h 24d 24d
freebsd test error: can't ssh into the instance 11 25d 25d 25d
freebsd build error (21) 3 26d 26d 26d
panic: kern_clock_gettime: NUM C 35 20h30m 28d 28d
SYZFAIL: ShmemBuilder: too large output offset 1 30d 30d 30d
panic: /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> C 5 33d 33d 33d
panic: sleeping thread holds tun_mtx 120 3h05m 38d 38d
panic: brelse: non-VMIO buffer marked NOREUSE 171 43m 40d 40d
SYZFAIL: open of /dev/kcov failed 4405 12m 44d 44d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/i386/kernel/sys/kern/sys_socket.c:LINE (3) 3 23d 49d 49d
panic: pfi_kkif_attach: null kif 3 18d 49d 49d
panic: vm_object_unwire: missing page 3 14d 52d 52d
panic: negative vmsize for uid -NUM 1 58d 58d 58d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 61d 61d 61d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR prev->next != 2 30d 63d 63d
panic: /syzkaller/managers/i386/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 1 63d 63d 63d
panic: mutex so_rcv not owned at /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE 6 61d 64d 64d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_process: Bad tailq NEXT(ADDR->tqh_last) != 1 65d 65d 65d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: _callout_stop_safe: Bad link elm ADDR next->prev != syz 2 65d 65d 65d
freebsd test error: SYZFATAL: image testing failed w/o kernel bug (2) 3 31d 67d 67d
panic: /syzkaller/managers/i386/kernel/sys/kern/uipc_usrreq.c:LINE: uipc_sosend_stream_or_seqpacket: Empty stailq ADDR-> 656 7h56m 69d 69d
panic: Assertion m->m_flags & M_BLOCKED failed at /syzkaller/managers/main/kernel/sys/kern/uipc_usrreq.c:LINE C 33 53d 69d 69d
panic: Assertion pd->pcksum failed at /syzkaller/managers/main/kernel/sys/netpfil/pf/pf.c:LINE 7 32d 69d 69d
panic: tcp_do_segment: sent too much: NUM>NUM 58 3d04h 70d 70d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcblbgroup_insert: Bad list head ADDR first->prev ! 3 33d 71d 71d
panic: /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE: in_pcbremlbgrouphash: Bad link elm ADDR next->prev != 1 71d 71d 71d
panic: vm_page_dirty: page is invalid! 2 30d 72d 72d
panic: Assertion pd->pcksum failed at /syzkaller/managers/i386/kernel/sys/netpfil/pf/pf.c:LINE 1 73d 73d 73d
panic: ASan: Invalid access, NUM-byte read at ADDR, StackMiddle(f2) (3) 7 4h56m 73d 73d
panic: negative vmsize for uid NUM 26 2d12h 76d 76d
Fatal trap NUM: page fault in witness_checkorder 4 61d 76d 76d
Fatal trap NUM: page fault in __mtx_lock_flags (4) 1 76d 76d 76d
panic: /syzkaller/managers/main/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h syz 380 8d18h 76d 76d
panic: /syzkaller/managers/i386/kernel/sys/kern/kern_timeout.c:LINE: callout_cc_add: Bad list head ADDR first->prev != h 202 47d 76d 76d
panic: executing segment marked as unreachable at /syzkaller/managers/main/kernel/sys/netinet/in_pcb.c:LINE (in_pcbremlb 1 85d 85d 85d
panic: inconsistent boundary count NUM 2 18d 86d 86d
panic: ip6_deletefraghdr: ext headers not contigous in mbuf ADDR m_len NUM >= offset NUM + NUM 686 37d 87d 87d
Fatal trap NUM: page fault in callout_process (4) syz 3565 15d 90d 88d
SYZFAIL: SIGBUS (2) 33 3d16h 110d 110d
SYZFAIL: SIGSEGV 40 1d09h 112d 112d
panic: if_ref: ifp ADDR has NUM refs (2) syz 2 24d 113d 24d
panic: vnode_pager_generic_getpages_done: page ADDR is mapped 6 29d 122d 122d
SYZFAIL: child stopped (2) 40 8h45m 126d 126d
SYZFAIL: clone failed (2) 4 3d05h 127d 127d
panic: mq notifiers left (3) 203 44m 128d 128d
panic: mld_change_state: bad ifp 7 9h57m 134d 134d
Fatal trap NUM: page fault in mld_change_state 6 27d 134d 134d
SYZFAIL: SIGILL (2) 267 4h28m 136d 136d
panic: pmap_growkernel: no memory to grow kernel (5) 457 25d 138d 138d
SYZFAIL: SIGFPE (2) 248 11h57m 138d 138d
SYZFAIL: invalid kcov comp type (4) 2783 now 152d 152d
SYZFAIL: posix_spawnp failed 51596 now 166d 166d
SYZFAIL: too much cover (3) 1535 4h40m 204d 204d
panic: pmap_demote_pde: a wired mapping is missing PG_A 61 1d13h 217d 217d
panic: vm_object_terminate_single_page: page ADDR does not belong to a queue 42 6d17h 264d 264d
SYZFAIL: cover mmap failed (2) 2322 14m 314d 314d
panic: Assertion done != job_total_nbytes failed at /syzkaller/managers/main/kernel/sys/kern/sys_socket.c:LINE (4) C 26 13d 319d 319d
Fatal trap NUM: page fault in in6m_disconnect_locked syz 21 3d23h 330d 330d
SYZFAIL: too many calls in output 154 18h13m 359d 359d
Fatal trap NUM: page fault while in kernel mode (6) syz 164 10d 359d 330d
SYZFAIL: failed to send rpc 423 7h20m 360d 360d
SYZFAIL: failed to recv rpc 94217 8m 361d 361d
syzkaller: testing failed: failed to run ["go" "test" "-short" "./..."]: exit status 1 (12) 134 10d 383d 383d
can't ssh into the instance 16416 now 417d 417d
SYZFAIL: leak checking is not implemented syz 76 416d 423d 423d
Fatal trap NUM: page fault in soisconnected C 2 460d 460d 460d
panic: size_on_reasm_queue is NUM (4) C 5 464d 542d 542d
SYZFAIL: child failed (2) syz 5397 1h14m 547d 547d
corrupted report (5) 611 4h39m 572d 572d
SYZFAIL: command failed (2) syz 15 10d 576d 576d
Fatal trap NUM: page fault in nd6_dad_timer (6) syz 13 273d 595d 538d
Fatal trap NUM: page fault in in_pcbbind_setup C 1 660d 660d 660d
suppressed report (4) 13123 now 719d 719d
SYZFAIL: tun: can't open device (2) syz 230 3h45m 720d 720d
panic: mutex Giant owned at /syzkaller/managers/main/kernel/sys/kern/kern_thread.c:LINE C 1112 680d 740d 740d
Fatal trap NUM: page fault in kasan_atomic_load_int (3) C 14 466d 1026d 1012d
panic: _mtx_lock_sleep: recursed on non-recursive mutex sctp-tcb @ /syzkaller/managers/main/kernel/sys/netinet/sctp_pcb. (3) syz 7 536d 1036d 1036d
Fatal trap NUM: page fault in ip6_output syz 20014 5d01h 1089d 1070d
panic: Assertion v != tid failed at /syzkaller/managers/main/kernel/sys/kern/kern_mutex.c:LINE (2) syz 262 59d 1109d 1109d
panic: ASan: Invalid access, NUM-byte write at ADDR, MallocRedZone(fb) C 1 1118d 1118d 1118d
panic: ASan: Invalid access, NUM-byte read at ADDR, UMAUseAfterFree(fd) (4) C 1447 1d16h 1121d 995d
Fatal trap NUM: page fault in __mtx_assert C 242 499d 1137d 1037d
panic: ASan: Invalid access, NUM-byte write at ADDR, UMAUseAfterFree(fd) (2) C 73 30d 1141d 573d
SYZFATAL: Manager.Poll call failed: connection is shut down syz 78758 383d 1172d 1169d
panic: a thread waited too long to allocate a page 23785 5m 1276d 1276d
panic: failed to reclaim memory C 271323 now 1276d 1258d
panic: pmap_san_enter_alloc_4k: no memory to grow shadow map C 135188 now 1348d 658d
panic: Going nowhere without my init! C 1055 2h08m 1499d 1499d
panic: size_on_all_streams smaller than control length (2) C 2081 45d 1790d 1790d
lost connection to test machine (2) C 741148 8m 2311d 15d
no output from test machine C 333324 now 2312d 1796d